CVE-2026-119086

The FreeRTOS-Kernel (versions before V11.3.3 ) is vulnerable to a type confusion and stack-based buffer overflow in the queue-set selection system call. Specifically, a missing type validation in xQueueSelectFromSet on MPU-enabled ports allows a local unprivileged task to write actor-controlled d...

CVE-2026-119086 Missing type validation in xQueueSelectFromSet in FreeRTOS-Kernel

Missing queue-set type validation in the queue-set selection system call in FreeRTOS-Kernel before V11.3.3 on MPU-enabled ports with queue sets enabled allows a local unprivileged task to write actor-controlled data beyond a pointer-sized object on the privileged kernel stack, affecting privilege...

CVE-2026-119086 Missing type validation in xQueueSelectFromSet in FreeRTOS-Kernel

Missing queue-set type validation in the queue-set selection system call in FreeRTOS-Kernel before V11.3.3 on MPU-enabled ports with queue sets enabled allows a local unprivileged task to write actor-controlled data beyond a pointer-sized object on the privileged kernel stack, affecting privilege...

CVE-2026-69446

A vulnerability in Microsoft Edge (Chromium-based) involves incorrect authorization that allows an authorized attacker to elevate privileges locally . This issue is categorized under CWE-863 . While the technical root cause and specific versions are not detailed in the provided documents, the vul...

EUVD-2026-114242

Incorrect authorization in Microsoft Edge Chromium-based allows an authorized attacker to elevate privileges locally...

CVE-2026-111498

OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Resource Locking vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass...

EUVD-2026-113946

OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Resource Locking vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass...

CVE-2026-111498

OpenManage Enterprise versions prior to 4.8.0 are susceptible to an Improper Resource Locking vulnerability (CWE-401). A high privileged attacker with local access could exploit this flaw to achieve a protection mechanism bypass . While the provided documents do not specify a direct fix version b...

CVE-2026-111498

OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Resource Locking vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass...

CVE-2026-118990

CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when taking a configuration backup. getConfigBlob has the sqlite3 shell write the dump to /tmp/cbdump and never removes it. The file takes the process umask, and a symlink planted at that...

kernel: selinux: check connect-related permissions on TCP Fast Open

A flaw was found in the Linux kernel's Security-Enhanced Linux SELinux module. When using TCP Fast Open, SELinux failed to properly check connect-related permissions. This oversight could allow a local attacker to bypass SELinux network access controls, potentially enabling unauthorized network...

CVE-2024-36587

CVE-2024-36587 - dnscrypt-proxy Local Privilege Escalation Overview Vulnerability Description : When installing the dnscrypt-proxy service, it trusts and registers executables in the current directory, allowing privilege escalation by inserting a malicious binary. Affected Versions : dnscrypt-pro...

CVE-2026-101213

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-97209

The Elixir mix tool (versions 1.20.0-rc.4 before 1.20.5 ) is vulnerable to an Insecure Temporary File flaw in the mix deps.partition component. The Mix.Tasks.Deps.Partition.server/4 function uses File.mkdir_p/1 to create a directory with a fixed name in the system temporary directory. Because thi...

EUVD-2026-113759

Insecure Temporary File vulnerability in Mix deps.partition in Elixir allows a local user to execute code as another user via a swapped partition config file. Partitioned dependency compilation passes the project configuration to each partition VM through a file in a fixed-name directory under th...

EEF-CVE-2026-97209 Insecure temporary file in mix deps.partition lets a local user execute code in another user's dependency build

Summary Insecure Temporary File vulnerability in Mix deps.partition in Elixir allows a local user to execute code as another user via a swapped partition config file. Partitioned dependency compilation passes the project configuration to each partition VM through a file in a fixed-name directory...

CVE-2026-97209 Insecure temporary file in mix deps.partition lets a local user execute code in another user's dependency build

Insecure Temporary File vulnerability in Mix deps.partition in Elixir allows a local user to execute code as another user via a swapped partition config file. Partitioned dependency compilation passes the project configuration to each partition VM through a file in a fixed-name directory under th...

CVE-2026-98933

A flaw was found in the Linux kernel's USB hub driver. An excessive hold time during the resume of USB root hubs causes instability in runtime power management on certain platforms. A local user running software that frequently wakes and polls the USB subsystem can trigger this issue, leading to ...

CVE-2026-98924

A flaw was found in the Linux kernel. A local user can trigger a Denial of Service DoS when attempting to unmount a filesystem after its underlying storage device has been disconnected while in use. During cleanup, the kernel repeatedly rescans cached file metadata structures without making...

CVE-2026-98990

A flaw was found in the Linux kernel. A local user can trigger a Denial of Service DoS or unexpected system behavior by unmounting filesystem submounts that are still actively in use. During the removal of propagating mount trees, the kernel fails to verify that a submount is free of active...